home

pro evolution soccer 2014 download free pc game.exe

Viktor Sepenko

This is a WebPick installer that bundles (with very minimal user consent) a number of adware browser extensions using the JustPlug.it browser framework. The application pro evolution soccer 2014 download free pc game.exe, “Installer for AllaboutApp” by Viktor Sepenko has been detected as adware by 23 anti-malware scanners. The program is a setup application that uses the WebPick InstalleRex (Tarma) installer. The setup program uses Web-Pick's InstalleRex download manager and installer to bundle potentially unwanted ad-supported software which includes toolbars and browser extensions through a pay-per-install monetization scheme.
Publisher:
AllaboutApp  (signed by Viktor Sepenko)

Product:
AllaboutApp

Description:
Installer for AllaboutApp

Version:
2014.5.14.1933

MD5:
bd75501febbf90f98696ab40acfec968

SHA-1:
7c248d01c65998c4500bbde4f686f34176ce81d0

SHA-256:
a3f4c08e5c1b67178618012def4b40462112173e7646b3fe42a70376409fd805

Scanner detections:
23 / 68

Status:
Adware

Explanation:
Uses the InstalleRex from WebPick Internet Holdings to install bundled add-ons including toolbars and other web browser extensions.

Analysis date:
4/28/2024 3:24:30 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.11291327
994

Agnitum Outpost
Trojan.AntiFW
7.1.1

AhnLab V3 Security
PUP/Win32.TSULoader
14.05.16

Avira AntiVirus
TR/Kazy.324119.17
7.11.150.22

Bitdefender
Trojan.Generic.11291327
1.0.20.680

Comodo Security
Application.Win32.InstalleRex.KG
18286

Dr.Web
Adware.Downware.2108
9.0.1.0136

Emsisoft Anti-Malware
Trojan.Generic.11291327
8.14.05.16.11

ESET NOD32
Win32/InstalleRex
8.9811

F-Secure
Trojan.Generic.11291327
11.2014-16-05_6

G Data
Trojan.Generic.11291327
14.5.24

Kaspersky
Trojan.Win32.AntiFW
14.0.0.3855

Malwarebytes
PUP.Optional.InstalleRex
v2014.05.16.11

McAfee
PUP-FHQ!BD75501FEBBF
5600.7128

MicroWorld eScan
Trojan.Generic.11291327
15.0.0.408

NANO AntiVirus
Riskware.Win32.InfoLeak.cvgqot
0.28.0.59911

Qihoo 360 Security
Malware.QVM20.Gen
1.0.0.1015

Quick Heal
Trojan.AntiFW.A5
5.14.14.00

Reason Heuristics
Adware.WebPick.Installer.p
14.7.28.0

Rising Antivirus
PE:PUF.InstallRex!1.9E4C
23.00.65.14514

Sophos
InstallRex
4.98

Vba32 AntiVirus
Downloader.AdLoad
3.12.26.0

VIPRE Antivirus
Trojan.Win32.Generic
29286

File size:
314.6 KB (322,112 bytes)

Product version:
1.0.0.3

Copyright:
Copyright © 2014 AllaboutApp

Original file name:
TSULoader.exe

File type:
Executable application (Win32 EXE)

Installer:
WebPick InstalleRex (Tarma)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\pro evolution soccer 2014 download free pc game.exe

Digital Signature
Signed by:
Viktor Sepenko

Authority:
COMODO CA Limited

Valid from:
9/19/2013 8:00:00 AM

Valid to:
9/20/2014 7:59:59 AM

Subject:
CN=Viktor Sepenko, O=Viktor Sepenko, STREET=Pirogova 13, L=Kiev, S=Kiev, PostalCode=01030, C=UA

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
61EED36FBD29C4C239E1658FCF31A812

File PE Metadata
Compilation timestamp:
3/12/2013 4:51:45 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:dreyVm/vbUzkuvcBYC47l2x1SVkJlzhrx7iY+1t8sBf4+sO6Xd5y5x9a:drzVm/kkuveY3MGWzlx7DMS7dG9a

Entry address:
0x14DB

Entry point:
55, 8B, EC, 81, EC, 2C, 06, 00, 00, 53, 56, 33, DB, 57, 66, 89, 9D, DC, FB, FF, FF, 89, 5D, F4, 89, 5D, FC, FF, 15, 74, 30, 40, 00, A3, 08, 44, 40, 00, FF, 15, 70, 30, 40, 00, 8B, F8, 8D, 45, EC, 50, FF, 15, 6C, 30, 40, 00, FF, 15, 68, 30, 40, 00, 8B, F0, F7, D6, 33, F7, FF, 15, 64, 30, 40, 00, 33, F0, 8B, 45, F0, 33, 45, EC, 68, 04, 01, 00, 00, 33, F0, 8D, 85, D4, F9, FF, FF, 50, 53, FF, 15, 60, 30, 40, 00, 85, C0, 75, 41, FF, 15, 5C, 30, 40, 00, 83, F8, 78, 75, 1A, 68, A8, 32, 40, 00, E8, 43, FB, FF, FF...
 
[+]

Entropy:
7.9526

Developed / compiled with:
Microsoft Visual C++

Code size:
7.5 KB (7,680 bytes)

The file pro evolution soccer 2014 download free pc game.exe has been seen being distributed by the following URL.

http://sharesuper.info/.../Pro Evolution Soccer 2014 Download Free PC Game.exe

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to r1.stylezip.info  (54.186.255.26:80)

TCP (HTTP):
Connects to c1.stylezip.info  (54.186.255.26:80)

 
http://c1.stylezip.info/?step_id=1&installer_id=5313032&publisher_id=313&source_id=0&page_id=0&country_code=US&locale=US&browser_id=4&download_id=15939096&external_id=0&session_id=31878192&hardware_id=37191224&installer_file_name=pro+evolution+soccer+2014+download+free+pc+game

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.